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BIP is a component framework for constructing systems by superposing three layers of modeling: 
Behavior, Interaction, and Priority. Behavior is represented by labeled transition systems commu- 
nicating through ports. Interactions are sets of ports. A synchronization between components is 
possible through the interactions specified by a set of connectors. When several interactions are pos- 
sible, priorities allow to restrict the non-determinism by choosing an interaction, which is maximal 
according to some given strict partial order. 

The BIP component framework has been implemented in a language and a tool-set. The execu- 
tion of a BIP program is driven by a dedicated engine, which has access to the set of connectors and 
priority model of the program. A key performance issue is the computation of the set of possible 
interactions of the BIP program from a given state. 

Currently, the choice of the interaction to be executed involves a costly exploration of enumer- 
ative representations for connectors. This leads to a considerable overhead in execution times. In 
this paper, we propose a symbolic implementation of the execution model of BIP, which drastically 
reduces this overhead. The symbolic implementation is based on computing boolean representation 
for components, connectors, and priorities with an existing BDD package. 

1 Introduction 

Component-based design is based on the separation between coordination and computation. Systems are 
built from units processing sequential code insulated from concurrent execution issues. The isolation of 
coordination mechanisms allows a global treatment and analysis. 

One of the main limitations of the current state-of-the-art is the lack of a unified paradigm for describ- 
ing and analyzing information flow between components. Such a paradigm would allow system designers 
and implementers to formulate their solutions in terms of tangible, well-founded and organized concepts 
instead of using dispersed coordination mechanisms such as semaphores, monitors, message passing, 
remote call, protocols etc. A unified paradigm should allow a comparison of otherwise unrelated ar- 
chitectural solutions and could be a basis for evaluating them and deriving implementations in terms of 
specific coordination mechanisms. Furthermore, it should be expressive enough to directly encompass 
all types of coordination as discussed in [11]. 

A number of paradigms for unifying interaction in heterogeneous systems have been proposed in 
[2, 3, 4, 15]. In these works unification is achieved by reduction to a common low-level semantic model. 
Interaction mechanisms and their properties are not studied independently of behavior. 

BIP [6] is a component framework for constructing systems by superposing three layers of modeling: 
Behavior, Interaction, and Priority. The lower layer consists of a set of atomic components represented 
by transition systems. The second layer models Interaction between components. Interactions are sets of 
ports specified by connectors [9]. Priority, given by a strict partial order on interactions, is used to enforce 
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scheduling policies applied to interactions of the second layer. The BIP component framework has a 
formal operational semantics given in terms of Labeled Transition Systems and Structural Operational 
Semantics derivation rules. 

The BIP language offers primitives and constructs for modeling and composing complex behavior 
from atomic components. Atomic components are communicating automata extended with C functions 
and data. Transitions are labeled with sets of communication ports. Compound components are obtained 
from subcomponents by specifying connectors and priorities. 

1.1 Overview of the tool-set 

The BIP tool-set 1 developed at Verimag includes 1) an editor, for textual description of systems in the 
BIP language; 2) a parser and a deparser, for generating from a BIP program a model conforming to the 
BIP meta-model 2 and vice versa; and 3) a compiler for generating executable C++ code. 

The execution of a BIP program is driven by a dedicated engine, which has access to the set of 
connectors and priority model of the program. In a given global state, each atomic component waits for 
an interaction through a set of active ports (i.e. ports labeling active transitions) communicated to the 
engine. The engine computes from the connectors of the BIP program and the set of all active ports, 
the set of maximal interactions (involving active ports). It chooses one of them, computes the associated 
data transfer and notifies the components involved in the chosen interaction. 

The BIP framework has been successfully used for modeling and analysis of a variety of case studies 
and applications, such as: performance evaluation [6], modeling and analysis of TinyOS based wireless 
sensor network applications [8], construction and verification of a robotic system [7]. In the latter, the 
code generated by the tool-chain along with the BIP engine is used as a controller for the robot. The BIP 
model also offers validation techniques for checking essential safety properties. 

1.2 Problem Definition 

A key performance issue is the computation of the set of possible interactions of the BIP program from 
a given state. Currently, the computation of the maximal interaction involves a costly exploration of 
enumerative representations for connectors. This leads to an important overhead in execution times. 

In this paper, we propose a symbolic implementation of BIP, drastically reducing this overhead. This 
symbolic implementation is based on computing a boolean representation for components and connectors 
using an existing BDD package. 3 

Sets of interactions in a system with the set of ports P can be bijectively mapped to the free boolean 
algebra M[P]. Ports are considered to be boolean variables (e.g., for P = {p,q}, the correspondence table 
is shown in Tab. 1). Whenever an interaction has to be chosen, a value true or false is assigned to each 
port variable according to whether it participates in the interaction or not. An interaction is possible iff 
the resulting valuation satisfies the boolean function, which describes the interaction model. 

The boolean representation of atomic components and priorities is relatively simple, whereas a 
straightforward approach to computing it for connectors involves costly enumeration of its interactions. 
In Sect. 2.4, we present a transformation avoiding this complex enumeration through a translation from 
the Algebra of Connectors, ^(P) [9], into the Algebra of Causal Trees, ^^(P) [10]. The terms of the 
latter have a natural boolean representation as sets of causal rules (implications). 



http : // www- verimag . imag . fr/~async/bip. php 

2 The meta-model is developed in the Eclipse Modeling Framework 
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Table 1: Correspondence between sets of interactions and boolean functions with P = {p,q} 
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The paper is structured as follows. Sect. 2 provides a succinct presentation of the basic semantic 
model for BIP and the Algebra of Connectors. Sect. 3 introduces the boolean representation of atomic 
components, connectors, and priorities, which is used for an efficient implementation of the BIP engine. 
Sect. 4 provides the performance comparison between the current and symbolic implementations. 

2 Formal Semantic Framework 
2.1 Operational Semantics 

A detailed and fully formalized operational semantics [5] is beyond the scope of this paper. Here, we 
provide a succinct formalization of the BIP component model focusing on the operational semantics of 
component interaction and priorities, and omitting the aspects related to data transfer and conditional 
operation (i.e. guards). 

Definition 2.1 Let P be a set of ports. An interaction is a subset a C P. 

Definition 2.2 (Behavior) A labeled transition system is a triple B = (Q,P,—>), where Q is a set of 
states, P is a set o/ports, and — > C Q x 2 P x Q is a set of transitions, each labeled by an interaction. We 
abbreviate (q,a,q') G ^ to q —> q' . 

An interaction a is active in a state q, denoted q iff there exists q' 6 Q such that q —> q'. A port is 
active in a state q, iff it belongs to an interaction active in this state. 

Components in BIP can be atomic and compound. Atomic components are defined by their behavior. 
Compound components are obtained by composition of their subcomponents (atomic or compound) 
using interaction and priority models as defined below. 

We require that sets of ports of atomic components are pairwise disjoint. That is, for a system 
obtained as the composition of n atomic components, modeled by transition systems Bj = (Q,-,^-,— >,-)> 
for i € [l,n], we have PiDPj = 0, for i,j G [l,n] (i / j). 

Definition 2.3 (Interaction) LetBi = (Qi,Pi,^i),fori 6 [l,n], be a set of components, and P = ULi^'- 
An interaction model is a set of interactions y C 2 P . 

The component y(B\ ,. .. ,B n ) is defined by the behavior (Q,P, — >y), where Q = FJjL i Qi and -^y is 
the least set of transitions satisfying the rule 

a£Y Vt £ [M], (an Pi +®^qi g3j q-) (1) 
(qi,...,q n ) \ (qi,...,q~ n ) 

with qt denoting q\, ifadPi^®, and qi otherwise. 
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Figure 1: Modulo- 8 counter 



The states of components that do not participate in the interaction remain unchanged. 

Example 2.4 (Modulo-8 counter) A BIP model for the modulo-8 counter is shown Fig. 1. It has three 
atomic modulo-2 counter components B\, B 2 , and B3, each having an input port (resp. p, r, and t) and 
an output port (resp. q, s, and u). In a modulo-2 counter, the output port is activated on every second 
activation of the input port. 

The modulo-8 counter is composed by synchronizing the output of B\ with the input of B 2 and the 
output of B 2 with the input of B3. This is achieved by the interaction model shown in the figure. 

An interaction a G 2 P is active in y(B\ B n ) iff, for all i G [1 ,n], a PI Pi is active in fi, or empty. An 
active interaction a is enabled in y(B\, . . . ,B n ) iff a G 7. For B = (Q,P, — >), q G Q, and a G 2 P , we define 
the predicate 

q-^, if B is an atomic behavior, 

Vi£[\,n],(anPi ^®^Act{B h q u aP\Pi)}, (2) 
ifS = y(Bi,...,S„) and 9 = (91,. ..,?„), 

Several distinct interactions can be enabled at the same time, thus introducing non-determinism in 
the product behavior, which can be restricted by means of priorities. 

Definition 2.5 (Priority) Let B = (Q,P,— ►) be a behavior. A priority model n is a strict partial order 
on 2 P . Given a priority model n, we abbreviate (a, a') £71 to a ~<a' '. 

The component 7l{B) is defined by the behavior (Q,P, — where is the least set of transitions 
satisfying the rule 

q-^q' fla! : (a -< a' A Act(B,q,a')^J 

q^nq 

An interaction is enabled in 7l{B) only if it is enabled in B and maximal according to % among the 
active interactions in B. 

Example 2.6 (Sender/Receivers) Fig. 2 shows a component ny(S,Ri,R 2 ,R3) obtained by composition 
of four atomic components: a sender S, and three receivers, R\, R 2 and R3. The sender has a port s for 
sending messages, and each receiver has a port r,- (i = 1,2,3) for receiving them. The second column in 
Tab. 2 specifies 7 for four different coordination schemes listed below. 

• Rendezvous means strong synchronization between S and all /?,-. This is specified by a single 
interaction involving all the ports. This interaction can occur only if all the components are in 
states enabling transitions labeled respectively by s, r\, r 2 , r3. 



Act(B,q,a) = < 
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Priorities: n 



Interactions: y 






Figure 2: A system with four atomic components 
Table 2: Interaction models, connectors and causality trees for four basic coordination schemes 



Scheme 


Interactions 


Connector 


Causal Tree 


Rendezvous 


{jr 1 r 2 r 3 } 


sr x r 2 r 3 


sr x r 2 r 3 


Broadcast 


{s, sr x , sr 2 , sr^i &r x r 2 , 


s'r x r 2 r 3 


s^>{r x ®r 2 ®r 3 ) 




sr { r 3 , sr 2 r 3 , sr x r 2 r 3 } 






Atomic Broadcast 


{s, sr x r 2 r 3 ] 


s'[r x r 2 r 3 \ 


s^r x r 2 r 3 


Causal Chain 


{s, sr 1: sr x r 2 , sr x r 2 r 3 } 


s'[r[[r' 2 r 3 ]] 


s^ri^r 2 ^>r 3 



• Broadcast means weak synchronization, that is a synchronization involving S and any (possibly 
empty) subset of /?,-. This is specified by the set of all interactions containing s. These interactions 
can occur only if S is in a state enabling s. Each /?; participates in the interaction only if it is in a 
state enabling r,-. 

• Atomic broadcast means that either a message is received by all /?,-, or by none. Two interactions 
are possible: s, when at least one of the receiving ports is not active, and the interaction sri r 2 r^, 
corresponding to strong synchronization. 

• Causal chain means that for a message to be received by /?; it has to be received at the same time 
by all Rj, for j < i. 

For rendezvous, the priority model is empty. For all other coordination schemes, the maximal 
progress priority model ensures that, whenever several interactions are possible, the interaction involving 
a maximal number of ports has higher priority. This is achieved by taking n = {(a, a') \ a £ a'}. 



2.2 The Engine 

The operational semantics is implemented by an engine. In the basic implementation, the engine com- 
putes the enabled interactions by enumerating over the complete list of interactions in the model. 

During execution, on each iteration of the engine, the enabled interactions are selected from the 
complete list of interactions, based on the current state of the atomic components. Then, between the 
enabled interactions, priority rules are applied to eliminate the ones with low priority. 

The main loop of the engine consists of the following steps: 

1 . Each atomic component sends to the engine its current state. 

2. The engine enumerates on the list of interactions in the model, selects the enabled ones based on 
the current state of the atomic components and eliminates the ones with low priority. 

3. Amongst the enabled interactions, the engine selects any one and notifies the involved atoms the 
transition to take. 
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Figure 3: Graphic representation of connectors 



The time to compute the enabled interactions by engine is proportional to the number of interactions in 
the model. 



2.3 The Algebra of Connectors 

In [9], the Algebra of Connectors, s^^iP), is introduced formalizing the concept of connector supported 
by the BIP language. Connectors are used to define the Interactions layer of the composed system. They 
can express complex coordination schemes combining synchronization by rendezvous and broadcast. 

In [9], the Algebra of Connectors has two binary operations: union and fusion. Union operation 
allows to combine several connectors into a single expression, whereas fusion is used to merge two 
connectors. Although here, for the sake of simplicity, we only consider the srf'ioiP) terms that do not 
involve union (monomial connectors in [9]), the presented results can be extended to the general case 
(see Sect. 3.2). 

Let P be a set of ports, such that 0, 1 P. The syntax of the Algebra of Connectors, srf'ioiP), is 
defined by 

s ::= [0] | [1] | [p] | [x] (synchrons) 

t ::= [0]' | [1]' | \p}' | [x]' (triggers) (4) 
JC . . — s I t I JC * JC ^ 

for p E P, and where • is a binary fusion operator, and brackets [■] and [•]' are unary typing operators. 

Typing is used to form hierarchically structured connectors: [■]' defines triggers (which can initiate 
an interaction), and [■] defines synchrons (which need synchronization with other ports). In order to 
simplify notation, we omit brackets on 0, 1, and ports p G P, as well as '•' for the fusion operator. 

Complete and formal presentation of the Algebra of Connectors and its properties can be found in 
[9] . Here we only give the intuitive semantics. 

The semantics of .s/^P) is given in terms of sets of interactions. Intuitively, it consists in recursively 
applying the following rule: For a connector of the form 

[x\]' ...[x n ]'[yi]...[y m \ 



a possible interaction is a union of interactions from the sub-connectors x\ , . . . ,x n ,y\ , . . . ,y m , comprising 
an interaction from at least one of the triggers x\ , . . . ,x n . When there are no triggers, an interaction from 
every synchron sub-connector y\, . . . ,y m is required to form an interaction of the complete connector. 

Graphically, connectors are represented as trees with ports at their leaves. We use triangles and disks 
to represent types: triggers and synchrons, respectively. 



Example 2.7 (Sender/Receivers continued) The srf'tfiP) connectors for the four coordination schemes 
of Ex. 2.6 are given in the third column of Tab. 2 and illustrated in Fig. 3. 
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Figure 4: Causal trees representation of connectors 



2.4 Causal Trees 

In [10], the Algebra of Causal Trees, "io 2?(P), is introduced, which allows the efficient computation of 
the boolean representation of the si^iP) connectors. This is achieved by rendering explicit the causal 
dependencies between ports participating in the interactions of a given si'ioiP) connector. 

In a fusion of typed connectors, triggers are mutually independent, and can be considered parallel 
to each other. Synchrons participate in an interaction only if it is initiated by a trigger. This introduces 
a causal relation: the trigger is a cause that can provoke an effect, which is the participation of a syn- 
chron in an interaction. For example, for connectors involving ports p and q, there are essentially three 
possibilities: 

1 . A strong synchronization pq. 

2. One trigger p'q, i.e. p is the cause of an interaction and q a potential effect, which we will denote 
in the following by p — > q. 

3. Two triggers p'q', i.e. p and q are independent (parallel), which we will denote in the following by 



where a € 2 is an interaction, — ► and © are respectively the causality and the parallel composition 
operators. Causality binds stronger than parallel composition. 

Although the causality operator is not associative, for t\,...,t n £ ^ 2?{P), we abbreviate t\ — > fa — ► 
(. . . — > t n ) ...)) to t\ — > t2 — ► ... — > t n . We call this construction a causal chain. 

Complete and formal presentation of the Algebra of Causal Trees and its properties can be found in 
[10]. Here we only give the intuitive semantics. 

The semantics of 'io 2T(P ) is given in terms of sets of interactions. Intuitively, it consists in applying 
the causal rule: For a node of a causal tree to participate in an interaction, it is necessary that its parent 
participate also. 

Example 2.8 (Sender/Receivers continued) The causal trees for the four coordination schemes of the 
Ex. 2.6 are given in the last column of Tab. 2 and illustrated in Fig. 4. 

The function t : si c €[P) — ► ^ 3~{P) associating a causal tree with a connector is defined by the 
following equations: 



p@q. 

The syntax of the Algebra of Causal Trees, ^ ' 2?(P), is defined by 



t ::= 



a\t -+t\t®t, 



(5) 




(6) 



(7) 



(8) 




(9) 
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where x,X[,x 2 ,yi, . . ■ ,y n €. si c €(P\ p G PU{0, 1}, and, in (9), we assume z(yk) = 0™*i a f — > f i> f° r 
A- 1.2. 

The equations above are sufficient to define T. Indeed, denoting by '~' the equivalence relation 
induced on stf^iP) by the semantics presented in Sect. 2.3, one can observe that 



[x,]'...[x n ]'[ yi ]...[y m ] ~ 

bi]---bm] - 



[ X1 }'[X 2 ]' 

bi]b2 



- / 








w 


hi • • • bm 



bm-l] bm], 



which means that for any connector in si^iP) there is a uniquely defined equivalent representation, to 
which one of the equations (7)-(9) is applicable directly. 

Example 2.9 Consider P = {p,q,r,s,t,u} and p'q' [r's] [t'u] € sftfiP). We have 

x(p'q'[[r's][t'u]\) = f X^[p'q']'[[r's][t'u]\^ = x{p 'q') - x([r ' s\[t '«*]) 
= (/>©?) -»■ (rt -»■ (j0w)) = ^->rt->(i®w)j ^->rt-»(j®«)j. 

3 Symbolic Implementation 

In the enumerative BIP engine, for each connector, the engine needs to compute all the possible inter- 
actions, check which ones are enabled in the current global state of the system, and select a maximal 
enabled one to be executed. As interactions are sets of ports, their number is potentially exponential in 
the number of ports in the connector. Hence, in the worst case, the performance of this engine can be 
extremely poor. 

The boolean BIP engine leverages on representing component behavior, connector interactions, and 
priorities as boolean functions. 4 For an atomic component, all ports and control states are represented by 
boolean variables. This allows to encode behavior as a boolean expression of these variables. Similarly, 
each connector is represented by the boolean expression on its ports. The global behavior is obtained as 
a boolean operation on the expressions representing atomic components, connectors, and priorities. 

The choice of an interaction to be executed boils down to evaluating the control states, substituting 
their respective boolean variables, and picking a valuation of the port variables satisfying the boolean 
expression that represents the global behavior. 

The boolean representation of connectors replaces the costly enumeration step by efficient BDD 
manipulations. In comparison to the exponential cost of the enumerative engine, this renders a more 
efficient engine with evaluation that, in practice, remains linear. The following sections describe in detail 
the boolean representation of the individual BIP elements and its evaluation by the engine. 

3.1 Atomic Components 

For each atomic component Bi = (Qi,Pi,—>) and each state q 6 Qi, we define boolean functions £ 

B[Gi,3] 



f q = qA /\ q> A\/ aA (\ p , f Bi =\/ f q y f\p- 



(10) 



The implementation of the boolean functions is made using the BDD package CUDD. 
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There are two possibilities for a valuation on Qi and P, satisfying 1) exactly one state variable 
q G Qi is set to true and valuations of port variables in Pj correspond to possible transitions of B{ from 
the state q; 2) all port variables are set to false, which means that the component does not change its 
state. 

The boolean function, representing all the possible transitions of the product automaton, is then the 
conjunction f B = A"=i h r 

Example 3.1 Consider the first Modulo-2 counter component in the Modulo-8 counter (Ex. 2.4). To 
avoid confusion in notations, we denote the states of this component by l\ and fe- The boolean function 
representing this component is then = l\ hpqV hhpqV pq, and the functions representing the other 
two Modulo-2 counters are computed similarly. Taking the conjunction, we obtain the boolean function 
representing the product of the three atomic components: 

Ib = (hhpqV hhpqV pq) A (/3 UrqV h UrsV fs) A {l^l^tqM Isl^tuV tu) . (11) 
3.2 Connectors 

Connectors are represented in boolean form as conjunctions of causal rules [10]. A causal rule is a 
boolean formula over a set of ports taking the form of an implication p =>• V"=i a <> where p is a port 
and a,-, for i G [l,n], are monomials representing interactions. An interaction a satisfies a causal rule 
if the valuation that it defines on the set of ports satisfies the boolean expression defining the causal 
rule. Notice, that this also means that either p does not belong to a or at least one of a, does, i.e. 
a \= p V"=i a i iff p G a =>■ 3/ G [l,n] : a; C a. 

Assume now that P is the set of all ports in the system. In order to obtain a boolean representation for 
connectors, we first compute, for each connector x, the corresponding causal tree t = t(jc) (cf. Sect. 2.4). 
The boolean function fc £ B[P] representing a connector is the conjunction of causal rules obtained 
from the causal tree essentially by inverting the arrows and the disjunction of roots of t (see Ex. 3.2 
below). Adding this last disjunction ensures that at least one of the nodes forming the roots of causal 
trees participate in the interaction. 

Example 3.2 The connector x = ^'[[^^'[[^ realizes exactly the interaction model of the Ex. 2.4 (cf. 
[9]). The corresponding causal tree is z(x) = p — > qr — > st —> u. Inverting the arrows and taking in 
account strong synchronizations (e.g., for q to participate in the interaction, r also has to participate), we 
obtain the causal rules 

q pr, r^pq, s^qrt, t qrs, u^st. 

The boolean function representing this connector is the conjunction of these rules together with p, which 
is the root of t(x): 

fx=ph(q=>pr)A(r=> pq) A (s =>■ qrt) A (t =>■ qrs) A (u =>■ st) . 

For a system having several connectors Ci,...,C m , boolean functions are individually computed as 
above for each of the Q and combined by taking fc = V^=i (/c, A Ap^c, p) > where p Q means that the 
port p is not used in Q. 
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3.3 Priorities 

To obtain a boolean representation of a priority model, given by a strict partial order n on 2 P , we define 
a function fp G M[P,P'], where P' = {p'\p G P}. 5 Abbreviating (a, a') G n to a -< a', we put 

fp = V ( A^ A A? A /\p' A A p 1 ) ■ ( 12 ) 

\pea p^a pGfl' p£a' / 

Clearly, a pair of interactions (a,a f ) belongs to n (i.e. a has lower priority than a') iff the corresponding 
boolean valuation {a, a!) satisfies fp. 

Notice that, according to (3), in a given state q of a behaviour B, a priority is only applied if the triple 
(B,q,a r ) satisfies the predicate Act. However, it can be easily verified that 

n 

Act(B,q,a') (a' \q) \= f B A /\q { , 

(=1 

where the conjunction in the right-hand side represents the global state of the system, and fp is the 
function computed in (1 1). 



3.4 The Engine Protocol 

The following protocol is used at each step of the execution to choose an interaction to be fired. It starts 
with an initialization phase, where the following boolean functions are computed: fp G B[ U"=i Qi, P] rep- 
resenting the atomic components; fc G M[P] representing the connectors; and fp G Bf/ 5 ,/ 5 '] representing 
the priorities. The conjunction f$ = /b A/c is also computed at this stage. 
The main loop of the engine consists of the following steps: 

1. Each atomic component B, sends to the engine its current state qi G Q;. 

2. The engine picks any valuation a on P, such that 

Ua,q)^f s A/\ qi \ A M : (ia,a',q) \= f P A/ B [x'/x] A f\ 9i ) , (13) 
\ i=l / i=l 

where q is the valuation on U" =1 Qi representing the global state of the system and a' is a valuation 
on P' (cf. Sect. 3.3). The function fp[x! /x\ is obtained by substituting p', for each port variable p 
in/i?. 

3. The engine notifies components by communicating to each B, the label aDPi of the transition to 
take. 

In (13), (a,q) \= f$ implies a \= fc, which means that a G y, i.e. the interaction a is authorized by 
the interaction model (cf. Def. 2.3). Similarly, (a,a',q) |= fp and (a,a',q) \= fp[xf /x] mean that a and a' 
respectively are active in the current global state q of the system. Finally, (a,a',q) \= fp means a -< a'. 
Thus, any interaction a, satisfying (13), represents an enabled interaction. 



5 The primes here are not related to those in the s/^P) syntax. 
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(a) (b) 

Figure 5: Schematic representation of the f$ BDD (a) and the BDD /\" =1 representing the current state 
of the system (b) 



3.5 Complexity of the Engine Protocol 

Observe that the BDDs for all the involved functions (/#, fa, fs, and fp) are only computed once and 
remain constant throughout the execution of the BIP model. Thus, the only operations performed at each 
iteration of the engine loop are the conjunctions and the existence check in (13). 

First consider the conjunction of f$ with state variables representing current states of atomic compo- 
nents. In general, the complexity of computing a conjunction of two BDDs is proportional to the product 
of their sizes [13]. Consequently, the complexity of the restriction of a BDD by substituting a value for 
one of the variables (e.g., computing fsAqi) is linear in the size of the BDD. However, it can also be 
shown that the complexity of taking the conjunction fs A ALi Qi * s a l so linear in the size of /<?. This is 
due to two reasons: 1) the BDD /\" =1 qi encoding the current state of the system has one node for each 
atomic component (see Fig. 5(b)), and 2) the variables q\,...,q n appear in the same order in the BDDs 
for both fs and Qi- Thus, when the size of the BDD for fs is small, so is the complexity of the 
symbolic engine. 

When constructing the BDD for fs, we alternate the port and control state variables, as presented 
schematically in Fig. 5(a). Indeed, it is well known that the order of variables in a BDD has an important 
influence on the complexity of boolean operations. Clearly, the variables representing ports and control 
states of an atomic component are strongly correlated. 

As the main goal of this paper is to demonstrate the feasibility of the presented approach, the current 
implementation is limited to the boolean representation of atomic components and connectors. It does not 
include priorities. Observe, however, that the combination of the existence check with the conjunction 
of BDDs, in (13), has been widely used for symbolic model checking [14]. The same argument as above 
shows that the complexity of the conjunction is linear in the size of fpAfs[x'/x] (this BDD can also be 
precomputed), whereas the complexity of the existence check is constant. 



4 Experimental Results 

We compare the engine execution times of the enumerative and boolean engines for two examples. The 
BIP models for both examples are limited to synchronization, i.e. do not have any data transfer. We 
present below the two examples and the simulation results. 
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Figure 6: A unit cluster for the Bus example 
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Figure 7: BIP models of a task (a) and a processor (b); connectors (c) 



4.1 Bus 

In this example, we consider a system consisting of N independent clusters of components commu- 
nicating through a "bus", i.e. a single common connector (see Fig. 6). Each cluster consists of four 
components that alternate some computation (transitions labeled c,-, for i € [1,4]) and communication 
(transitions labeled s,, for i E [1,4]). 

Computations of the four components in a cluster are completely independent and cannot be synchro- 
nized. Thus, for each i € [1,4], there is a singleton connector q. On the other hand, communications 5; 
are weakly synchronized by the connector s\s' 2 s' 3 S4. In this connector, the ports si, S2, and 53 are triggers, 
whereas S4 is a synchron. This means that communication is only possible through S4 when at least one 
other component is ready to communicate — the fourth component is an observer. 

A system with Af clusters (i.e. 4N components) has connectors. We say that connectors are sparse 
in this system, which favors the enumerative engine as its execution time becomes linear in the number 
of components. 



4.2 Preemptable Tasks 

This example originates from [1], where a performance evaluation problem is considered with timed 
tasks running concurrently on shared processors. Here, we disregard the timed aspects of this example 
and only consider the task behavior concerned with processor sharing. 

Consider M processors and Af tasks that can be executed on any processor. A processor can have at 
most two tasks assigned to it at a time: one running and one preempted. On arrival of a new task, the 
running one is preempted. A task is resumed, when the one that has preempted it terminates. 

The BIP model of the task component type is shown in Fig.7(fl r ). It has an "idle" state s, and, for 
each processor i G [1,M], a "compute" state c,- and a "wait" state w,-. An idle task (in state s) can begin 
execution on the processor i by taking the transition labeled bi from the state s to the state c,-. It can finish 
execution by taking the transition labeled /; from the state c ; - back to the state s. 

A task running on the processor i can be preempted (transition labeled pi from the state c,- to the state 
wi) and, subsequently, resumed (transition labeled r, from the state w; to the state c,). 
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The BIP model of the processor component type is shown in Fig. 1(b). A processor i is free in the 
control state 1$, and can start executing a new task by taking a transition labeled s to the state l\. To do 
so, it must synchronize with the "begin" port bj of the task to be allocated. 

From the state h, the processor can move back to state Iq, if the running task finishes (transition 
labeled by e). Otherwise, it can preempt the running task and start a newly arriving task by taking a 
transition to fa, labeled by the port s. To do so, it must synchronize with the "begin" port bj of the newly 
arrived task and "preempt" port pt of the currently running task. Similarly, for a processor with two tasks 
(state fa) an interaction e/,r, ends the running task and resumes the preempted one. 

Each task is connected with every processor and all other tasks. Fig. 7(c) shows the corresponding 
connectors [bs]'p and [fe]'r between a task 7\, a processor P, and another task T2. For the sake clarity, 
we show only the relevant ports. 

Thus, in a system of N tasks and M processors, there are 2N(N — \)M connectors. We say that 
connectors are dense in this system, which favors the boolean engine: execution time of the boolean 
engine is linear in the number of components (cf. Sect. 4.3 and Fig. 8(b)), whereas that of the enumerative 
engine is linear in the number of connectors and quadratic in the number N of tasks. 

Observe that e.g., connector [bs]'p has two interactions bs and bsp. Whenever a task is already 
running on a processor, it has to be preempted before a new one can be started. This is realized by 
the maximal progress rule, i.e. giving priority to bsp over bs. Both enumerative and boolean engines 
automatically pick the maximal interaction, which does not increase computational complexity of the 
underlying algorithms (contrary to arbitrary priorities). 

4.3 Simulation results 

We measured the engine execution times for both examples for 10 6 iterations of the engine loop. Fig. 8(a) 
shows the engine execution times obtained with both the enumerative and boolean engines, related to the 
number of components in the system. Fig. 8(b) shows the size of the system BDD f$. Observe that for 
both examples, the size of this BDD is linear in the number of components. 

As expected, for the Bus example, the execution times of both engines are close and linear in the 
number of components (dashed lines in Fig. 8(a)). The enumerative engine outperforms the boolean 
one. This is due to the fact that the basic operation of the boolean engine (BDD conjunction in (13)) is 
more expensive than that of the enumerative engine (connector evaluation). 
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In the Preemptable Tasks example, we fixed the number of processors to M = 4. The execution 
time of the enumerative engine is linear in the number of connectors, i.e. quadratic in the number of 
components (solid lines in Fig. 8). The execution time of the boolean engine is linear in the number of 
components. Thus boolean engine considerably outperforms the enumerative one. 

5 Conclusion 

We presented the symbolic implementation of the BIP execution framework. This implementation is 
based on computing boolean representation for components and connectors by using an existing BDD 
package. The boolean representation is used by the engine at runtime to compute the interaction to be 
executed at each iteration of the engine loop. The aim of the symbolic implementation is to reduce 
the overhead observed in the original enumerative engine due to this computation. The main goal of 
this paper is to demonstrate the feasibility of this approach. Therefore, even though we provide an 
implementation technique for priorities, the main focus of this paper is on the boolean representation of 
connectors. 

We have compared the execution times of the two engines. For the enumerative engine, the worst- 
case complexity of the engine protocol is proportional to the number of connectors, whereas, for the 
symbolic implementation it is proportional to the size of the BDD for the function f$ representing the 
system. 

The engine execution times were evaluated for two examples favoring respectively the two engines. 
For systems with dense connectors (as in the Preemptable Tasks example), the execution time of the 
enumerative engine explodes, whereas that of the boolean engine remains small due to the small size of 
the BDD for f$. For systems where connectors are sparse (as in the Bus example), the execution times 
of both engines are close, with the enumerative one potentially outperforming the symbolic one. 

The size of the BDD is influenced by the order of variables. Hence, we alternate port and state 
variables (cf. Fig. 5(a)), as these are strongly correlated — the active ports of each atomic component are 
determined by its current state. Using this variable ordering we obtained system BDDs linear in the 
number of components for both examples that we have considered. 

One of the directions for future work is to determine the optimal order of atomic components de- 
pending on the topology of the connectors. Indeed, graph-theoretical methods like clique detection could 
allow keeping strongly interconnected atomic components close to each other in order to further reduce 
the size of the system BDD. 

We believe that the techniques presented in this paper can improve the efficiency of the BIP engine 
in many practical situations. Furthermore, they can be adapted for other frameworks with structured 
multi-way communication, like Reo [2], Lotos [12], etc. 
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